Currently, tl-ldap-certalias overwrites /etc/passwdaliases unconditionally, without saving a backup copy. This ain't good; if the customer has handcrafted this file, all such work is lost. It would be nice if tl-ldap-certalias only appended to this file, or at least saved a backup copy.